Secure Configuration

this page details the neurons for itsm content related to the administrator role, their tasks pertaining to secure configuration and administration and all security components in itsm that are required to be aligned with the fedramp guidelines user roles in itsm in itsm, the user roles are broadly defined under three user categories – administrators – are users managing the overall administration of neurons for itsm and monitoring its operational health administrators have access to all modules and configuration of workspaces for most configuration tasks, you must log in as an administrator and work in the configuration console common administrator tasks include the following defining the security structure add users to roles to control access to the system constructing business objects used to capture and display data in the environment designing the workflows required to process information defining the schedule of escalation for processing incidents, tasks, and service requests users – are the it support staff who manage service requests, problems, and incidents, for example, service desk analyst, service desk manager, and change manager self service users – employees and external customers who use the self service portal to request it business services, such as reporting a service interruption or ordering a computer users in the self service portal can also create incidents and check the status of existing incidents for more information, refer to types of users https //help ivanti com/ht/help/en us/ism/2026/admin user/content/common/types of service manager users htm adding users to the system and assigning roles the administrator manages user access by adding new users to the system and assigning roles to ensure required permissions and responsibilities are set for users to function and carry on with their responsibilities for more information, refer to adding users to the system and assigning roles to users https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/setupwizard/adding users to roles htm and setting up roles https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/roles/setting up roles htm secure login the administrator ensures secure login to the application by managing authentication settings, enforcing strong password policies, managing session timeouts, and more the following topics have in depth information regarding assigning user roles, setting up users, accessing urls securely, setting up user login https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/login/log in htmlogging in or accessing records using urls https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/login/log in using urls htmconfiguring anonymous user https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/login/anonymous log in htmapplication security https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/about security htmrole based security https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/authorization htmcontrolled access https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/ip whitelisting htm provisioning and decommissioning of tenants the following topics have in depth information regarding provisioning and decommissioning of tenants deploying neurons for itsm https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/adminonly/how heat works htm?highlight=provisionusing development project https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/development project/development project package htm decommissioning of tenants – to decommission a tenant, raise a ticket to the ivanti operations team administrator only security controls administrators ensure application security by configuring authentication settings restricted to top‑level accounts, with clear security implications the following topics have in depth information regarding authentication methods and security settings authentication https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/authentication htmabout external authentication configuration https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/authentication configura htmsetting up itsm users for authentication via the neurons platform https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/setting up user for auth via neurons htmsetting up external authentication with ldap https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/ldap synchronization htmworking with single sign on authentication https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/single sign on htmworking with adfs/saml https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/adfs saml htmabout windows integrated security https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/windows integrated security htmsetting up authentication for openid connect with google https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/open id connect htmsetting up authentication for openid connect with microsoft azure https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/open id connect azure htmneurons for itsm openid connect configuration https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/openid connect configuration htmsetting up authentication for openid connect with yahoo https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/open id connect yahoo htmsetting up authentication for openid https //help ivanti com/ht/help/en us/ism/2026/admin user/content/configure/security/open id htm recommended secure default settings for administrative accounts and privileged accounts this capability is currently not available, but it's tentatively planned to be delivered by the end of 2026 compare current settings to default settings for administrative accounts and privileged accounts this capability is currently not available, but it's tentatively planned to be delivered by the end of 2026 export security settings in a machine readable format there are currently no plans on the one year roadmap to provide this capability due to other innovations taking priority it may be considered in future releases view and adjust security settings using api or any other integration there are currently no plans on the one year roadmap to provide this capability due to other innovations taking priority it may be considered in future releases version history for the recommended default secure settings this capability is currently not available, but it's tentatively planned to be delivered by the end of 2026